This case study analyzes the information system security and risk management in Telstra, a leading telecommunication service provider. It discusses the threats and vulnerabilities of network devices, the use of security devices for mitigation, the availability of web services using Windows Server 2016, the impact of employees on information security, and risk management recommendations.